Lucene search
+L

2133 matches found

CNVD
CNVD
added 2022/06/20 12:0 a.m.19 views

Sourcecodester Hospital Patient Records Management System SQL注入漏洞(CNVD-2022-48746)

Sourcecodester Hospital Patient Records Management System is a Web-based application that provides hospitals with an automated platform to store and manage their patient records. Management System is vulnerable to SQL injection, which originates from /hprms/admin/?page=user/manageuser&id= page...

7.2CVSS2.2AI score0.00909EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/06/20 12:0 a.m.19 views

Sourcecodester Hospital Patient Records Management System SQL注入漏洞(CNVD-2022-48753)

Sourcecodester Hospital Patient Records Management System is a web-based application that provides an automated platform for hospitals to store and manage their patient records. Management System is vulnerable to a SQL injection vulnerability that originates in the...

9.8CVSS2AI score0.01026EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/06/20 12:0 a.m.17 views

Sourcecodester Hospital Patient Records Management System SQL注入漏洞(CNVD-2022-48749)

Sourcecodester Hospital Patient Records Management System is a web-based application that provides hospitals with an automated platform to store and manage their patient records. sourcecodester Hospital Patient Records Management System is vulnerable to a SQL injection vulnerability that originat...

7.2CVSS2.1AI score0.00909EPSS
SaveExploits1References1
Check Point Advisories
Check Point Advisories
added 2022/06/20 12:0 a.m.55 views

SAP NetWeaver J2EE Engine SQL Injection (CVE-2016-2386)

An SQL injection vulnerability exists in SAP NetWeaver J2EE Engine. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements on the affected system...

7.5CVSS3.5AI score0.7106EPSS
SaveExploits9
CNVD
CNVD
added 2022/06/17 12:0 a.m.44 views

Online Tours And Travels Management System SQL注入漏洞

Online Tours And Travels Management System is an online tour management system. v1.0 of Online Tours And Travels Management System is vulnerable to SQL injection, which originates from /admin/operations/tax. The tname parameter in php lacks validation for external input SQL statements. An attacke...

7.2CVSS4.3AI score0.00909EPSS
SaveExploits1References1
NVD
NVD
added 2022/06/15 4:15 p.m.35 views

CVE-2019-4575

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM...

9.8CVSS0.01068EPSS
SaveExploits0References2
Prion
Prion
added 2022/06/15 4:15 p.m.20 views

Sql injection

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM...

7.5CVSS9.4AI score0.01068EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2022/06/15 12:0 a.m.56 views

WordPress Bestbooks plugin SQL注入漏洞

WordPress and others are products of the WordPress Foundation. WordPress is a blogging platform developed in PHP. stb and others are products of the WordPress Foundation. stb is a single-file public domain library for C/C. WordPress plugin is an application plugin. WordPress Bestbooks plugin 2.6....

9.8CVSS2.7AI score0.09047EPSS
SaveExploits2References1
ThreatPost
ThreatPost
added 2022/06/10 1:27 p.m.56 views

U.S. Water Utilities Prime Cyberattack Target, Experts

Industrial controls governing water-related U.S. critical infrastructure are woefully under-estimated as cyberattack targets. The potential for attack, say policymakers, is too great to ignore with consequences potentially devastating to populations. On Wednesday, the Center on Cyber and Technolo...

6.9AI score
SaveExploits0References3
CNVD
CNVD
added 2022/06/09 12:0 a.m.55 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55723)

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/stockin/index.php?view=edit&id= The page lacks validation of externally entered SQL...

9.8CVSS4.4AI score0.01067EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/06/09 12:0 a.m.14 views

Badminton Center Management System SQL注入漏洞(CNVD-2022-44732)

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records. Badminton Center Management System version v1.0 is vulnerable to S...

7.2CVSS3.9AI score0.00795EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/06/09 12:0 a.m.42 views

Online Car Wash Booking System SQL注入漏洞(CNVD-2022-53345)

Online Car Wash Booking System is an online car wash booking system from Carlo Montero's personal developer. version v1.0 of Online Car Wash Booking System is vulnerable to SQL injection, which originates from /ocwbs/admin/?page=bookings /viewdetails&id=page lacks validation of external input SQL...

9.8CVSS4.7AI score0.01067EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/06/09 12:0 a.m.57 views

Online Fire Reporting System SQL注入漏洞

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/classes/Master.php?f= deleteteam lacks validation of external input SQL statements, whi...

9.8CVSS4.8AI score0.0716EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/06/09 12:0 a.m.17 views

Badminton Center Management System SQL注入漏洞(CNVD-2022-44725)

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records. Badminton Center Management System v1.0 version has a SQL injectio...

7.2CVSS3.2AI score0.00958EPSS
SaveExploits1References1
Prion
Prion
added 2022/06/06 7:15 p.m.20 views

Sql injection

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database...

7.5CVSS9.5AI score0.01294EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/06/06 4:20 p.m.38 views

CVE-2022-31768

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database...

5.3CVSS9.7AI score0.01294EPSS
SaveExploits0References2
Veracode
Veracode
added 2022/06/03 2:38 p.m.56 views

Denial Of Service (DoS)

mariaDB is vulnerable to denial of service. The vulnerability exists due to an issue in the component Usedtablesandconstcache::usedtablesandconstcachejoin allowing an attackers to crash the system via specially crafted SQL statements...

7.5CVSS6.8AI score0.01644EPSS
SaveExploits1References5Affected Software5
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.7 views

Online Ordering System SQL注入漏洞

Online Ordering System is a multi-store ordering system that can be used by any small business.Online Ordering System version 2.3.2 is vulnerable to a SQL injection vulnerability that originates in /ordering/index.php?q=products&id=The page lacks validation for external input SQL statements, whic...

9.8CVSS6AI score0.01081EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/05/31 12:0 a.m.45 views

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45901)

CSCMS Music Portal System is a diversified content management system from China Sunshine Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing validation of the id parameter at /admin.php/pic/admin/pic/del for external...

9.8CVSS3AI score0.11623EPSS
SaveExploits1References1
Veracode
Veracode
added 2022/05/27 12:38 a.m.30 views

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. The vulnerability exists in Createtmptable::finalize which allows an attacker to crash the application via specially malicious SQL statements...

7.5CVSS7.6AI score0.02406EPSS
SaveExploits1References9Affected Software3
Rows per page
Query Builder